Privacy in ArcGIS Managed Cloud Services

How does ArcGIS Managed Cloud Services handle your data?

We focus on embedding the Privacy by Design controls below for consumer goods and services and have achieved ISO 31700-1 Privacy by Design certification for ArcGIS Managed Cloud Services (MCS). This ensures privacy is not only compliant but intentionally embedded into how our services are designed, delivered and operated.

Previous
Next

Privacy By Design Principles

Previous
Next

Frequently Asked Questions

Name, contact details, address, IP Address, MAC Address and usage data related to the ArcGIS Managed Cloud Services (MCS) application. We do not collect sensitive data such as social insurance numbers, financial account details or health records.

We protect personal information through encryption, secure storage, access controls and regular security audits. Additionally, we use privacy-by-design principles, minimize data collection and conduct risk assessments to protect against privacy risks. We do not knowingly collect data from minors and comply with applicable child privacy laws.

Personal information is kept only as long as necessary for the purpose defined in the MCS contract or as required by law, such as breach-related data. We delete personal information after 90 days from contract termination or upon request.

Personal information is shared only when necessary for service delivery, legal compliance, reporting to authorities, contractual obligations, security purposes or with your consent.

All personal information is stored within Canada by default. However, Esri Canada is flexible if you choose to store data elsewhere.

You can access, update or delete your data and manage consent preferences. Control your privacy by managing account settings, consent options and reviewing privacy notices.

Our Privacy Officer oversees compliance and privacy practices. If you feel your concerns are not addressed, you may contact the Privacy Officer or escalate to the Office of the Privacy Commissioner of Canada.

Esri Canada complies with PIPEDA, LAW 25, Bill 96 and other applicable Canadian privacy laws.

Yes, we use cookies for functionality, analytics and to improve user experience. We conduct analytics and processing to enhance services and system performance. AI is used in limited ways to boost functionality and user experience.

Learn more about our commitment to privacy, security and compliance.

Visit our Trust Centre